A858DE45F56D9BC9 archive

201210091600 116oy1

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 483

Metadata

Post ID
116oy1
Title
201210091600 → 2012-10-09 16:00 on A858's clock
Posted (UTC)
2012-10-09 07:00:03
Timezone
UTC+9 · title 16:00 against posted 07:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210091600) = 6fc1af4768eeb7bad4dd01fec0ef58b7 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(483).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
497 · predicted N = 29 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210091600 (name+title). Key = MD5(password) = 6fc1af4768eeb7bad4dd01fec0ef58b7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a1b4ea68-d815-0e13-877c-0428d37ab888
  2 ac517a0b-31be-4f26-87a1-7aa3518e8550
  3 6f01e908-30f9-3f58-bbfa-97c93a57ff05
  4 94208b48-0c21-5935-8994-dcef1a8abbcf
  5 d26818a0-42e2-247d-a271-9c78e8b00f08
  6 441131ce-5f55-54bc-9206-de20d483e430
  7 5ae46548-cd5f-2c99-bd3b-8522f078fa9d
  8 363fc81a-4d53-6248-bac1-68b384ef040f
  9 733eb9a7-9fd0-64a3-828c-b5f61b20cd7d
 10 72e62485-7a6a-36e9-a9df-d104b7d2551b
 11 09163505-88b5-1b87-89a1-673cfbaf7d65
 12 385357f6-df13-40da-b9da-3da9ddd6ebe9
 13 617b2927-6b90-603b-9e5e-b507fa5fa5fb
 14 d83bbd05-9610-6b51-a1d1-d8c5c7f70359
 15 d0b2ed34-bd27-084d-abbb-34e2e43073f3
 16 9f681996-546b-6e47-a749-12cb112f9dbc
 17 24cf9375-3545-8bfe-b265-fcdcda34bb42
 18 970ca2e2-9147-4832-9844-231913d5bfc5
 19 9db32a4b-62ba-6f58-b089-cd0651adedb9
 20 30ee4a3d-a026-3dc0-8124-5e5a396b1f60
 21 fcf497c3-f6c3-8257-a51a-0715383c5411
 22 58588289-9c9f-3fc8-ad85-763887f3ecce
 23 f894e39d-f9cc-5519-b459-b19e046e4903
 24 12f9fd1c-952f-62dd-8e83-2299a14a391f
 25 9b5d3c47-82fc-040f-8ca8-301be2aff15a
 26 26fe2adc-6469-14b0-ac7b-c3efdba90e64
 27 da2b8afe-93c4-1820-a459-81b7990baba7
 28 c764b6db-3689-8052-95f9-6486fafffeac
 29 1724dcd9-6c20-8e5a-bebb-4a8a0f50e56e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 04352526631466068463835601188. Exactly this sequence comes out of new Random(483).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 497 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results